Authentication flaw

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

CVE-2017-2165

CVE-2017-2165 affects GroupSession versions ≤ 4.6.4. The root cause is a failure to restrict access permissions, allowing remote authenticated attackers to bypass access controls and obtain sensitive information such as emails via unspecified vectors. Documented impact is authenticated access to ...

CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

Japan Total System GroupSession Unrestricted Access Vulnerability

Japan Total System GroupSession is a groupware project by Japan Total System JTS to facilitate communication among companies and organizations, aiming to promote information sharing. A security vulnerability exists in JTS GroupSession 4.6.4 and earlier versions, which stems from the program's...

GroupSession fails to restrict access permissions

Overview GroupSession provided by Japan Total System Co.,Ltd. is open source groupware. GroupSession fails to restrict access permissions. Norihiko Hirukawa of FiveDrive Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

JVN#42164352: GroupSession fails to restrict access permissions

GroupSession provided by Japan Total System Co.,Ltd. is open source groupware. GroupSession fails to restrict access permissions. Impact An authenticated attacker may obtain other user's senisitive information such as email. Solution Update the Software Update to the latest version according to t...